1:1 NAT

DanS · #1 (**permalink**) 09-22-2003, 03:49 PM

Hi All,

I just installed ASL, and I'm trying to figure out how to setup a 1:1 NAT rule outbound. All packets from a specific machine should go out as a specific IP/hostname. I know how to set this up manually in iptables, but I'm not sure how ASL handles this.

Thanks!

uncue75 · #2 (**permalink**) 09-22-2003, 08:48 PM

All you have to do is setup a DNAT rule to forward all ports to that particular IP.

Go into the defintions and add the machine that you want to forward all the ports to.

then....

go to network > NAT/Masq

Give your NAT rule a name. the type would be DNAT/SNAT.

source: any

destiation: the address that the connections are comming in on

service: any

change source to: no change

change destination to: the machine you created in the definitions section

I think that should work.

You then need to go into the your packet filters and tell it to allow any service to connect to that machine.

DanS · #3 (**permalink**) 09-24-2003, 08:29 PM

Thanks,
That gave me enough to work off of.

Cheers

uncue75 · #4 (**permalink**) 09-24-2003, 09:25 PM

cool. glad you got it to work.